Title: Blockchain-based collaborative intrusion detection scheme

Authors: Tianran Dang; Guohua Tian; Jianghong Wei; Shuqin Liu

Addresses: State Key Laboratory of Integrated Service Networks (ISN), Xidian University, Xi'an, 710071, China ' State Key Laboratory of Integrated Service Networks (ISN), Xidian University, Xi'an, 710071, China ' State Key Laboratory of Mathematical Engineering and Advanced Computing, Zhengzhou, 450002, China ' School of Computer Science and Technology, Xi'an University of Post and Telecommunications, Xi'an, 710121, China

Abstract: The collaborative intrusion detection technique is an effective solution to protect users from various cyber-attacks, among which the large-scale trusted sharing and real-time updating of attack instances are the main challenges. However, the existing collaborative intrusion detection systems (CIDS) either can only achieve real-time instance sharing in a centralised setting or implement large-scale instance sharing through blockchain. In this paper, we propose a novel blockchain-based CIDS scheme. Specifically, we present a reputation-based consensus protocol, which incentivises service providers (SP) to evaluate the attack instances collected from collectors and punishes the malicious evaluators. Then, only trusted attack instances will be published on the blockchain to provide large-scale trusted intrusion detection services. Furthermore, we introduce a redactable blockchain technique to achieve dynamic instances update, which enables our scheme to provide a real-time intrusion detection service. Finally, we demonstrate the practicality of the proposed scheme through security analysis, theoretical analysis and performance evaluation.

Keywords: collaborative intrusion detection; blockchain; reputation-based consensus; redactable blockchain.

DOI: 10.1504/IJCSE.2023.132147

International Journal of Computational Science and Engineering, 2023 Vol.26 No.4, pp.418 - 429

Received: 07 Mar 2022
Accepted: 09 Apr 2022

Published online: 12 Jul 2023 *

Full-text access for editors Full-text access for subscribers Purchase this article Comment on this article